<select>
  <option value=123>123</option>
  <option value=xss><script src=/script.js></script><img src=favicon.ico></option>
</select>
<script src=script.js>
</script>
